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l ABSTRACT OF THE DISCLOSURE 

2 

3 The invention provides a method and system for reliably performing extra- 

4 long operations in a reliable state- full system (such as a file system). The system records 

5 consistency points, or otherwise assures reliability, notwithstanding the continuous per- 

6 formance of extra-long operations and the existence of intermediate states for those extra- 

7 long operations. Moreover, performance of extra-long operations is both deterministic 

8 and atomic with regard to consistency points (or other reliability techniques used by the 

n 9 system). The file system includes a separate portion of the file system reserved for files 

%]Jo having extra-long operations in progress, including file deletion and file truncation. This 

Jjji separate portion of the file system is called the zombie filespace; it includes a separate 

iff 2 name space from the regular ("live") file system that is accessible to users, and is main- 

03 tained as part of the file system when recording a consistency point. The file system in- 
ly 

eludes a file deletion manager that determines, before beginning any file deletion opera- 

yi5 tion, whether it is necessary to first move the file being deleted to the zombie filespace. 

16 The file system includes a zombie file deletion manager that performs portions of the file 

17 deletion operation on zombie files in atomic units. The file system also includes a file 

18 truncation manager that determines, before beginning any file truncation operation, 

19 whether it is necessary to create a complementary file called an "evil twin". The trunca- 

20 tion manager will move all blocks to be truncated from the file being truncated to the evil 

21 twin file. The file system includes a zombie file truncation manager that performs por- 

22 tions of the file truncation operation on the evil-twin file in atomic units. An additional 
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1 advantage provided by the file system is that files having attached data elements, called 

2 "composite" files, can be subject to file deletion and other extra-long operations in a natu- 

3 ral and reliable manner. The file system moves the entire composite file to the zombie 

4 filespace, deletes each attached data element individually, and thus resolves the compos- 

5 ite file into a non-composite file. If the non-composite file is sufficiently small, the file 

6 deletion manager can delete the non-composite file without further need for the zombie 

7 filespace. However, if the non-composite file is sufficiently large, the file deletion man- 

8 ager can delete the non-composite file using the zombie filespace. 
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